Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
File:                     RqlWvtJoh-zDNOme-RpZrXvBwg0.mft (raw, json)
Hash identifier:          WQMLYjksGpvCjQz5gP8NRn5aGjF13c2SbhNxw/caZXI=
Subject key identifier:   EE:42:63:20:B4:16:7C:0C:EE:07:37:F7:C6:9F:B9:05:98:F4:88:1F
Authority key identifier: 46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D
Certificate issuer:       /CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
Certificate serial:       019FA8995A4C01BF1CC88D649266D6106231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:50 +0000
Files and hashes:         1: RqlWvtJoh-zDNOme-RpZrXvBwg0.crl (hash: cCLYTyzMmi+LdjH6ejOzdN5yKpuSLmU/f5tp+L5pZRg=)
                          2: iKuPyI8zLCgawXSKX7-BKU55u_A.roa (hash: MfsvzyIXZkMQ/jz1uJByq5Hlv40Mpv4XoWbE4eac8sA=)
                          3: jlb1JR39IZf6Kz4j-cidvZRw1XU.roa (hash: Lqj4swNPp/lea9TA80l8kyLyCZmi6zz9jIqgO1fuqCw=)
                          4: v1sDuaAhI8RktqCN1F9A6U4PuUQ.roa (hash: nbLLR8O00X3nu5KSCFNmcVmiRFRIuKaoskqHKWizJhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:5a:4c:01:bf:1c:c8:8d:64:92:66:d6:10:62:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46a956bed26887ecc334e99ef91a59ad7bc1c20d
        Validity
            Not Before: Jul 28 12:00:50 2026 GMT
            Not After : Jul 29 12:00:50 2026 GMT
        Subject: CN=ee426320b4167c0cee0737f7c69fb90598f4881f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:16:a8:44:14:f6:fc:7d:c2:dc:47:e6:60:
                    6b:70:0f:82:6c:31:a8:dd:8d:04:84:0d:30:a1:d5:
                    2f:83:2d:68:6e:fc:15:21:65:8b:2e:9d:14:65:47:
                    c2:1f:7d:87:f5:7b:2b:a9:94:b2:18:6a:a1:c7:47:
                    07:40:ac:47:8d:d8:c3:3a:9a:ab:a4:c8:f4:e4:92:
                    05:1c:46:15:e8:ab:6f:d2:51:83:97:e9:3b:bb:38:
                    db:76:ce:aa:29:b6:a2:a4:b5:f0:8d:84:43:d3:be:
                    88:05:1d:39:cf:3b:0e:d6:37:3d:70:5a:a4:c0:44:
                    8c:af:e2:0c:04:4e:87:5b:e5:5b:f2:f2:09:bd:da:
                    62:b1:2a:0f:21:4f:9a:e2:d1:2d:b4:c7:41:4d:53:
                    99:d5:20:6f:41:a9:6d:54:d9:fe:bd:44:98:ff:88:
                    51:57:f9:66:a4:15:4b:ad:00:fb:f9:2c:d3:20:7f:
                    5a:2b:6b:36:f3:2f:67:f7:e9:8a:1b:2d:27:7c:98:
                    c8:73:b5:fa:41:19:fb:74:39:e5:bf:f6:b5:ec:c9:
                    da:5c:c0:a4:fd:f6:cb:37:99:be:92:5c:c8:f8:57:
                    1b:20:b9:cc:e0:bc:71:34:b6:50:cc:c3:ec:a0:18:
                    9f:93:0e:25:6c:bb:b3:50:0a:c6:f0:14:94:58:6a:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:42:63:20:B4:16:7C:0C:EE:07:37:F7:C6:9F:B9:05:98:F4:88:1F
            X509v3 Authority Key Identifier:
                keyid:46:A9:56:BE:D2:68:87:EC:C3:34:E9:9E:F9:1A:59:AD:7B:C1:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqlWvtJoh-zDNOme-RpZrXvBwg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/RqlWvtJoh-zDNOme-RpZrXvBwg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4f:db:17:df:9e:98:15:2b:89:ec:b9:01:7c:4f:7b:23:3c:
         ff:e6:24:e7:c0:2a:7e:38:e6:b4:a3:61:e4:91:1d:4a:74:59:
         ff:b6:25:48:9a:cc:23:fd:9a:c7:b9:70:d8:2a:0c:ee:8c:3f:
         66:25:02:a3:ae:7a:73:bd:26:56:b1:95:f7:22:4e:c6:e7:67:
         6d:05:ff:ae:3f:12:f1:51:33:2f:74:33:66:16:4e:d8:58:4f:
         a6:9d:a3:7d:f0:d7:20:49:b1:b3:01:18:3f:d7:a6:dc:7a:23:
         d0:8b:8d:95:85:24:03:3b:31:9f:a8:d8:e1:28:fa:22:e7:f0:
         ca:11:53:0f:07:fe:45:71:f2:5a:c9:36:42:0c:bd:bd:5b:52:
         75:df:8b:91:d4:18:41:9a:09:24:01:0c:86:ff:57:2d:8c:2f:
         48:f8:2d:f7:6e:89:f2:6d:05:9f:99:a0:02:56:8c:b6:66:08:
         6f:2f:16:72:05:fd:ec:af:39:02:18:76:94:6b:cc:29:df:43:
         be:04:dc:e0:34:a6:08:94:de:3a:48:4a:67:82:e4:5a:18:4f:
         aa:bc:94:b3:d8:11:1a:1b:1c:71:d4:02:72:59:fb:b6:9f:08:
         82:97:91:bf:66:4e:52:b0:9e:09:a3:fd:d4:ad:1f:3b:d6:a5:
         5d:94:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:33 2026 by rpki-client